Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: u4EEJc/K3bH/cpLa86meX8bZwRJQMSU43eSxLD/+LDw=
Subject key identifier: D2:BB:BC:48:4D:81:EA:B3:5F:F1:91:F2:EE:90:58:0A:0A:0C:E5:29
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019ED46251CE06A51C0021088C0134A9823A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 06BE
Signing time: Wed 17 Jun 2026 07:01:13 +0000
Manifest this update: Wed 17 Jun 2026 07:01:13 +0000
Manifest next update: Thu 18 Jun 2026 07:01:13 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: JN4TiYwQ0fCu3AEI8CJrGD9Py0PSb5y4tlY9nmc+XrA=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:62:51:ce:06:a5:1c:00:21:08:8c:01:34:a9:82:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jun 17 07:01:13 2026 GMT
Not After : Jun 18 07:01:13 2026 GMT
Subject: CN=d2bbbc484d81eab35ff191f2ee90580a0a0ce529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:df:ad:28:c7:74:70:d7:b4:83:f7:7c:8c:
a5:f6:d3:4d:b3:df:b2:68:09:7f:7b:fa:fa:0e:d0:
01:20:b3:f4:90:e1:b8:e1:3c:d0:f3:13:bc:61:18:
67:6f:12:ea:af:4a:cd:a9:2f:e3:6e:f3:de:2b:90:
ca:e4:e0:00:3c:54:9f:1f:92:ee:39:f3:cf:13:72:
a3:8f:5b:12:27:11:a3:e1:61:92:c1:a2:b9:5f:81:
dd:4c:00:d7:b0:e3:75:fa:dc:25:44:e0:de:3e:e3:
b5:dc:13:a6:36:4b:fc:e9:66:12:65:02:00:bf:a1:
b5:0a:71:39:75:a7:e2:74:ae:7b:83:1a:96:15:4e:
d7:5e:59:8f:45:a2:e8:7e:08:91:17:f1:ee:ae:de:
30:a4:e4:6e:62:07:dd:4a:ae:13:be:44:fa:a4:50:
95:c2:7d:da:76:5a:26:33:1a:09:b0:48:c0:2c:3d:
99:44:c4:1b:95:c5:f8:5b:c3:12:ed:e0:50:8f:1e:
c5:17:2e:ec:88:96:28:7e:05:49:65:76:99:5e:e2:
92:49:d7:50:56:fe:8c:b2:b3:84:47:57:66:6b:ff:
0e:f0:ec:a7:c5:d9:a1:b4:e2:3f:95:84:78:70:03:
57:45:e7:54:28:c2:8d:01:75:2b:c3:9b:fd:aa:5d:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:BC:48:4D:81:EA:B3:5F:F1:91:F2:EE:90:58:0A:0A:0C:E5:29
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:05:ee:b4:63:27:e2:93:e6:84:87:5a:ea:1a:70:2e:03:91:
00:e3:1a:b2:e4:83:ea:53:71:a3:75:13:5a:65:b9:a6:dd:03:
9c:a0:f2:77:ed:86:88:22:97:18:27:6f:a6:04:f3:82:fa:77:
94:1e:91:56:e5:01:43:a0:d2:3c:d4:76:de:31:3b:93:ca:8e:
37:73:0e:49:d9:54:fd:4a:fa:3a:22:7f:19:59:ae:ea:6a:a1:
b5:4e:59:f7:65:20:9b:3e:20:25:f9:fb:62:ca:b9:78:ee:f2:
f0:91:d0:c2:d0:0a:80:09:35:2f:eb:63:df:98:64:90:f2:94:
58:ea:c0:32:f4:fc:f0:b8:c4:19:ce:2d:45:61:31:33:e9:70:
28:1e:48:f5:4e:08:b7:77:ac:ab:e7:ef:05:95:a3:6f:50:f3:
88:29:49:06:61:84:ce:41:aa:f8:70:c5:1c:1c:6a:ab:97:0f:
80:a7:f7:55:b5:2a:cf:89:29:fc:4b:f0:6e:1a:f7:82:b9:90:
9f:75:a8:bb:79:74:fd:27:46:ea:f1:e7:30:ad:50:c7:db:64:
c7:61:d9:bd:5d:3a:c8:d7:0f:fa:37:29:a7:ea:7c:7c:ff:6d:
90:0a:c7:f6:30:78:08:df:8e:57:f6:57:e1:b1:77:a1:7a:f1:
4c:91:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:20:27 2026 by rpki-client